1108505 - "This Connection is Untrusted"-message in a small <iframe> might cut off the "Add exception" button

Status: RESOLVED INVALID

(Core Graveyard :: Security: UI, defect)

Description

[MarkusThamm]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0; Mozilla Firefox 31.2.0 - 10712-10112-60
Build ID: 20141125031119

Steps to reproduce:

Access the following web-site:
https://www.realestate.siemens.com/restaurant-services/speiseplaene/speiseplaene_stuttgart_weissacher.php


Actual results:

I get the "This Connection is Untrusted"-message. That is ok. BUT I can't scroll down anywhere. No chance that I accept the message. I want to continue with the site. But I can't tell firefox to continue.
I am blocked from using the site!

(One more comment: I do not have any influence on the content of the site.)


Expected results:

Firefox should show complete dialog. The bottom is missing.

Comment 1

[Andre Klapper]

That iframe is width="360px" and height="300px". The page owner should fix their certificates instead of Mozilla working around some really bad web 'design' (that's my personal opinion).

You can still reach that side by looking at the source code and copying the embedded URL:
https://gpartner.erlm.siemens.de/sp-tool/dl/pdfdl.aspx?standort=34

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

The site has disabled scrolling on that frame, so Firefox is doing the right thing. Even if scrolling were still enabled, Firefox doesn't allow users to add overrides for certificate errors encountered in framed pages. The goal of bug 991313 is to improve the UX in these cases. I'm resolving this as "INVALID", which is a poor way of saying "works as intended".